[GitHub] [incubator-druid] mohammadjkhan commented on a change in pull request #6972: Support LDAP authentication/authorization

[GitBox <gi...@apache.org>]

mohammadjkhan commented on a change in pull request #6972: Support LDAP authentication/authorization
URL: https://github.com/apache/incubator-druid/pull/6972#discussion_r270911400
 
 

 ##########
 File path: docs/content/development/extensions-core/druid-basic-security.md
 ##########
 @@ -155,6 +189,27 @@ Example request body:
 }
 ```
 
+`GET(/druid-ext/basic-security/authentication/db/{authenticatorName}/config)`
+Return the authenticator current set of updatable configuration.
+
+`POST(/druid-ext/basic-security/authentication/db/{authenticatorName}/config)`
 
 Review comment:
   The use case for dynamic Escalator credentials update is to allow/support rolling update of  Escalator credentials within a Druid cluster without having to restart any services and risk any sort of services downtime. In a large scale production cluster if the Escalator credentials get comprised administrators will just need to dynamically update the credentials and not have to worry about restarting all the services within the cluster.
   The same use case applies for dynamic authenticator config update. It will allow administrators to dynamically update ldap related configuration used to authenticating users without having to restart any services and create any downtime. The ldap configuration includes a bind password property, if the password gets compromised then it would be really nice if it can be updated across all services in rolling fashion without restarting any services and risk downtime

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org